MIDRANGE dot COM Mailing List Archive



Home » MIDRANGE-L » June 2014

Re: Password checking for web service calls



fixed

James,

Maybe a dumb question: does this user have to enter name and password for given web service?

I would think of using validation lists to do that job.

Just a thought.

Regards,
Carel Teijgeler


On 10-6-2014 19:06, James H. H. Lampert wrote:
Question:

I need to validate that a web service, running under IWS, is being
called by a legitimate user with a correct password. (Needless to say,
it's being called through HTTPS.)

The only way I know of to do a programmatic password check is with a
QSYGETPH. Even though I never actually *use* the profile handle returned.

The docs for QSYGETPH say that it will run out of space if you call it
more than 20k times within a single job. And with a web service, there's
every reason to expect that limit to be exceeded.

Is there some other way of programmatically checking password validity,
one I'm not aware of, one that just gives me a yes/no answer, without
generating profile handles I'm not actually using?

--
JHHL





Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact